• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

prisma-risk / tsoracle / 26376896994
95%

Build:
DEFAULT BRANCH: main
Ran 25 May 2026 12:25AM UTC
Jobs 1
Files 76
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

25 May 2026 12:20AM UTC coverage: 94.819% (-0.08%) from 94.9%
26376896994

push

github

web-flow
fix(consensus): reject out-of-range high-water advance before persisting (#360)

An out-of-range physical_ms value (> PHYSICAL_MS_MAX) handed to
persist_high_water was durably committed by both consensus backends
before any range check: the openraft and paxos drivers appended the
Advance to the replicated log and applied it with an unchecked
max(prev, at_least). Only the single-node FileDriver guarded at persist
time.

A committed out-of-range value is a poison. On every subsequent
leadership gain load_high_water returns it, the allocator's
try_on_leadership_gained rejects it (PhysicalMsOutOfRange), and the new
leader can never serve; the high-water only ratchets up, so it cannot
self-heal. The most plausible trigger is a saturated clock, since
SystemClock::now_ms saturates to u64::MAX to surface a far-future clock
visibly.

Centralize the bound in tsoracle-consensus as reject_out_of_range_advance
(classified PermanentDriver) and call it at the propose boundary of every
ConsensusDriver::persist_high_water (openraft, paxos) so the value is
rejected before it is appended and never reaches the apply path. Migrate
FileDriver's inline persist-time check onto the same helper so the bound
cannot drift across backends.

Closes #353

67 of 80 new or added lines in 3 files covered. (83.75%)

1 existing line in 1 file now uncovered.

11585 of 12218 relevant lines covered (94.82%)

416240.79 hits per line

Uncovered Changes

Lines Coverage ∆ File
11
88.21
-3.59% crates/tsoracle-driver-openraft/src/driver.rs
1
96.3
-0.09% crates/tsoracle-consensus/src/lib.rs
1
96.55
-0.29% crates/tsoracle-driver-paxos/src/driver.rs

Coverage Regressions

Lines Coverage ∆ File
1
97.44
-0.32% benchmarks/stress/src/loadgen.rs
Jobs
ID Job ID Ran Files Coverage
1 26376896994.1 25 May 2026 12:25AM UTC 76
94.82
GitHub Action Run
Source Files on build 26376896994
  • Tree
  • List 76
  • Changed 5
  • Source Changed 4
  • Coverage Changed 5
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #26376896994
  • 103923d6 on github
  • Prev Build on main (#26375487257)
  • Next Build on main (#26377288510)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc